Privacy Policy

Scope and choices

This policy applies to ApplyNotes on Chrome and Android, the optional ApplyNotes Cloud service, and the Windows x64 Native Companion. ApplyNotes is local-first: you can use its local features without creating an account. Cloud processing begins only when you sign in and enable ApplyNotes Cloud.

Information stored locally

Local ApplyNotes data can include Notes, Journal entries, Projects, rich text, status and organization metadata, settings, links, images, generic files, attachment metadata, and local history. On Chrome, this data is stored in the current Chrome profile using extension storage and IndexedDB. On Android, it is stored in an app-private SQLite database and app-private documents storage for attachments. Your operating system may back up or transfer eligible app data according to your device settings and platform backup rules.

Local content is not uploaded merely because you install or open ApplyNotes. It leaves the device only when you choose an action such as enabling Cloud sync, sharing or exporting content, or using another service selected through the operating system.

Android camera, photos, files, and sharing

ApplyNotes requests camera access only when you choose to take a photo for a note. Photos and files are selected through the Android system picker or received through the Android Sharesheet. ApplyNotes does not continuously scan your photo library, files, or data in other apps.

When you explicitly share text, a URL, an image, or a supported file from another Android app to ApplyNotes, ApplyNotes saves that item locally. If you later enable and complete ApplyNotes Cloud setup, content in your notes may be synchronized to your own ApplyNotes Cloud account. When you share or export from ApplyNotes, the destination app or service you select handles the copy it receives under its own terms and privacy practices.

Capture and Native Companion

User-initiated browser capture may temporarily access the active tab and show a selection overlay. The optional Native Companion can capture a display, window, or custom region on Windows. Captures and annotation are processed locally. The companion does not silently capture, monitor the clipboard, or upload pixels.

Optional account and authentication

An ApplyNotes account is optional and is used for ApplyNotes Cloud. Supported sign-in flows include email and password, email one-time passcodes, and password reset. Supabase provides authentication. Authentication information is transmitted over HTTPS, and a persistent session credential may be stored locally so you remain signed in. Never send your password, one-time passcode, or session token to ApplyApp support.

Optional ApplyNotes Cloud data

When you enable Cloud, ApplyNotes may process your email address, account and device-generated identifiers, device platform and name, Notes, Journals, Projects, structured rich text, images, documents and other supported files, original filenames, MIME types, file sizes, SHA-256 hashes, sync versions, timestamps, deletion markers, conflict metadata, storage usage and quota, and subscription entitlement or status. These categories are not uploaded for a local-only user simply because the app is installed.

Service providers and purpose

Supabase provides authentication and stores private structured Cloud data. Cloudflare R2 stores private synchronized media and file objects. Stripe processes billing information for supported ApplyNotes Cloud purchase flows outside the current Android app; ApplyNotes receives billing identifiers and subscription status but does not receive or store full payment-card numbers or CVC values. The current Android app does not contain a checkout, external payment link, Stripe SDK, or Google Play Billing purchase flow.

Cloud data is used to authenticate you, provide private backup and multi-device sync, enforce entitlement and quota, support download and deletion controls, resolve sync state, prevent abuse, and operate the service.

Security

ApplyNotes uses HTTPS for network transport, Supabase access controls and row-level security, private Cloudflare R2 object storage, and short-lived signed access for Cloud files. ApplyNotes Cloud is not end-to-end encrypted or zero-knowledge. The Android SQLite database and local attachment files are not encrypted by ApplyNotes at the application layer. Device and operating-system security protections may still apply, but no system can guarantee absolute security.

Analytics, advertising, and operational data

The current ApplyNotes Android app contains no advertising, behavioral analytics, tracking, or crash-reporting SDK. ApplyApp does not sell ApplyNotes content or use Notes, Journals, images, or files to train generalized AI models. Infrastructure providers may process ordinary network and security information, such as IP addresses, request timestamps, error details, and abuse-prevention signals, to deliver and protect their services.

Chrome Web Store Limited Use

Use and transfer of information received from Google APIs by the Chrome extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. That information is used only to provide and improve the user-facing ApplyNotes features you request.

Retention and deletion

While subscribed, Cloud content remains available subject to the applicable storage quota. After Cloud entitlement ends, existing Cloud content may remain read-only for a limited period so you can download or delete it before it becomes eligible for permanent deletion. Confirmed account deletion removes the active ApplyNotes account and Cloud copies under the account-deletion process. Limited records may be retained when reasonably necessary for security, fraud prevention, legal, tax, accounting, or dispute-resolution obligations, and deleted information may remain temporarily in restricted infrastructure backups until those backups expire.

Deleting a Cloud account does not delete copies already stored locally on your devices. Uninstalling ApplyNotes is also not the same as deleting an ApplyNotes Cloud account. See the ApplyNotes account deletion page for instructions.

Your controls

You can use local export and backup tools, choose whether to enable Cloud, sign out, share or export selected content, and request deletion of your Cloud data or account. Exported backups are not encrypted by ApplyNotes, so store them securely.

Policy updates

We may update this policy when ApplyNotes, its platforms, or its service providers change. The date above identifies the current version. Material changes will be communicated where required.

Contact

Email privacy, support, or deletion questions to support@applyapp.cc. You can also review the Terms of Use and Support page.